$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer File: 337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer (raw, json) Hash identifier: uuoCLIGJ5SlQ7m+rS6rwvBDy1a3kDEmPhHSkZjgTGm8= Subject key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584355AD6F65A469A334CDA21EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Sep 2023 00:45:21 +0000 Certificate not after: Sun 28 Dec 2025 01:45:21 +0000 Subordinate resources: AS: 3455 AS: 13540 IP: 136.184.0.0/16 IP: 143.115.0.0/16 IP: 168.147.0.0/16 IP: 198.8.128.0/17 IP: 199.115.32.0 -- 199.115.53.255 IP: 2620:174::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:55:ad:6f:65:a4:69:a3:34:cd:a2:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 25 00:45:21 2023 GMT Not After : Dec 28 01:45:21 2025 GMT Subject: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:50:02:63:e2:05:ee:35:2c:3e:f9:b9:0b: d1:6a:b3:57:a7:28:ba:d7:1a:c7:f3:44:dd:40:ac: 93:40:88:1b:81:13:25:61:39:59:0b:c9:06:02:55: a5:1e:1a:f3:d3:1d:75:96:77:13:1c:9e:6b:12:70: 3d:a3:f8:c0:e1:4c:5b:21:ca:f3:92:66:55:b6:4f: ea:92:ad:a6:d8:c1:27:0d:22:e0:a3:a3:33:b2:4f: 1d:ae:b1:fe:1a:a8:dc:3e:69:32:b8:01:91:0d:70: d7:c3:1c:39:ce:95:37:cf:c7:80:8e:78:f3:b6:ed: 46:9c:c5:b3:56:45:14:95:12:8b:50:d9:51:22:45: 60:18:0d:d1:60:5d:87:fc:4b:13:d5:49:71:51:90: 2f:cd:3f:c1:b5:9a:11:b8:ab:23:ce:a6:1c:6a:e0: 72:8a:4f:af:df:47:cd:f9:fe:35:44:26:9d:a3:4b: 89:16:67:f2:18:70:ed:4d:77:03:26:22:0f:06:bd: c9:ff:0b:41:24:be:57:06:e0:a6:45:54:0a:45:ae: 60:bb:a6:6c:6d:eb:1a:7d:48:19:27:7d:72:79:e3: 38:c7:a0:0a:34:6f:b5:f5:50:90:f4:15:18:fd:3a: 64:89:e6:fb:b3:eb:69:f2:03:a9:f0:5c:e6:bc:49: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 136.184.0.0/16 143.115.0.0/16 168.147.0.0/16 198.8.128.0/17 199.115.32.0-199.115.53.255 IPv6: 2620:174::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3455 13540 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:69:8f:84:a7:bd:b7:6d:aa:f5:34:bc:ff:93:2e:fa:dd:9b: c3:d2:e1:1e:73:fe:c8:07:f4:f2:ae:7c:d9:78:1a:13:7e:80: a3:47:2e:a1:4e:b9:89:7d:64:1e:45:82:d0:cd:80:e1:85:f5: a9:43:4e:18:56:73:68:5f:9e:f7:68:71:58:13:63:58:5c:7e: 9f:3a:84:3b:eb:69:a8:ce:0a:33:73:98:67:fa:69:5d:67:e8: b1:99:88:64:f2:21:14:b6:68:ad:b4:82:f9:d7:d5:47:bf:ac: b9:34:ee:f3:2f:ac:eb:22:6c:12:20:6b:b9:23:59:3b:99:21: bf:f3:ae:59:86:04:19:be:0b:9d:dc:b1:68:d8:c7:4e:4f:72: 63:09:59:d7:dd:69:17:2b:76:d5:6e:70:b7:5a:01:e0:8f:0a: 31:a7:09:28:0c:6b:eb:37:7a:35:d3:49:b3:20:ca:15:92:d0: 79:2a:25:c2:43:cc:10:41:c7:5c:75:a0:6f:35:67:9c:f0:aa: 57:b6:26:6e:9a:24:2e:23:b3:20:c6:30:ae:4a:43:fd:62:f2: d5:07:d7:c3:1c:86:5a:38:24:11:02:5d:1b:5c:79:77:4c:96: 5d:30:35:86:3b:88:87:ea:2b:a7:fa:05:bc:99:5c:07:a4:c0: 79:df:8b:57 -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWENVrW9lpGmjNM2iHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDkyNTAwNDUyMVoXDTI1MTIyODAxNDUyMVowLzEtMCsGA1UEAxMk MzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNkNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgFQAmPiBe41LD75uQvRarNXpyi61xrH80Td QKyTQIgbgRMlYTlZC8kGAlWlHhrz0x11lncTHJ5rEnA9o/jA4UxbIcrzkmZVtk/q kq2m2MEnDSLgo6Mzsk8drrH+GqjcPmkyuAGRDXDXwxw5zpU3z8eAjnjztu1GnMWz VkUUlRKLUNlRIkVgGA3RYF2H/EsT1UlxUZAvzT/BtZoRuKsjzqYcauByik+v30fN +f41RCado0uJFmfyGHDtTXcDJiIPBr3J/wtBJL5XBuCmRVQKRa5gu6ZsbesafUgZ J31yeeM4x6AKNG+19VCQ9BUY/Tpkieb7s+tp8gOp8FzmvEk/0wIDAQABo4IESzCC BEcwHQYDVR0OBBYEFEMbS+mRhpJgocByJMSXA7/oSjFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z MzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMzNzAzNWYwLWQ1ZDEtNDVkMC1i NjQ3LTdhMjNmOWUzZDU0Yy8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjll M2Q1NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCkEAgABMCMDAwCIuAMDAI9zAwMAqJMDBAfGCIAwDAMEBcdzIAME AcdzNDAOBAIAAjAIAwYEJiABdAAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICDX8C AjTkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK1pj4SnvbdtqvU0vP+TLvrdm8PS4R5z/sgH9PKufNl4GhN+ gKNHLqFOuYl9ZB5FgtDNgOGF9alDThhWc2hfnvdocVgTY1hcfp86hDvraajOCjNz mGf6aV1n6LGZiGTyIRS2aK20gvnX1Ue/rLk07vMvrOsibBIga7kjWTuZIb/zrlmG BBm+C53csWjYx05PcmMJWdfdaRcrdtVucLdaAeCPCjGnCSgMa+s3ejXTSbMgyhWS 0HkqJcJDzBBBx1x1oG81Z5zwqle2Jm6aJC4jsyDGMK5KQ/1i8tUH18Mchlo4JBEC XRtceXdMll0wNYY7iIfqK6f6BbyZXAekwHnfi1c= -----END CERTIFICATE-----Generated at Wed Apr 24 15:52:31 2024 by rpki-client on console-ams.rpki-client.org